(English Version: Top-right translate button OR scroll down.)

什么是链上行为

指区块链上围绕交易、程序执行、状态更新和事件触发所发生的一系列可观察动作。包括提交交易、签名授权、执行合约、状态更新、事件记录等,围绕这些动作还会展开解释、监控和响应相关的行为。

为什么链上行为难理解、难判断?

链上的行为往往不是直观的可理解的语言,机器可读的操作、函数调用和状态的变化都是需要较强的技术背景或者额外工具的辅助才能被人理解;

而即时看到了部分调用、日志或状态变化,人也未必能立刻判断这次行为的真实含义,它到底是正常操作、风险操作还是恶意操作。

为什么链上行为需要被解释?

这里可以从三个阶段进行分析:

签名前:因为用户在签名前往往无法直接看懂交易将导致什么资产变化、权限变化、合约调用或者潜在的风险;

执行中:虽然合约函数被调用的具体情况是能被看见的,但是调用路径复杂、调用层级太多,这些行为对应交易里的哪些具体后果,是需要进行转译后才能被普通人理解;

执行后:执行后,状态需要更新,数据需要被记录,执行后的状态变化虽然被机器自动完成了,但是这些变化对于人类来说未必是直观可读的,因此它们需要被解释成资产、权限、风险或业务结果。

What is On-chain Behavior

It refers to a series of observable actions occurring on the blockchain centered around transactions, program execution, state updates, and event triggering. This includes submitting transactions, signing authorizations, executing contracts, updating states, and recording events. Surrounding these actions, related behaviors of interpretation, monitoring, and response are also developed.

Why is On-chain Behavior Difficult to Understand and Judge?

On-chain behaviors are often not presented in intuitively understandable language. Machine-readable operations, function calls, and state changes require a strong technical background or the assistance of additional tools to be understood by humans. Even if some calls, logs, or state changes are seen, humans may not be able to immediately judge the true meaning of the behavior—whether it is a normal operation, a risky operation, or a malicious operation.

Why Does On-chain Behavior Need to be Interpreted?

This can be analyzed through three stages: Pre-signing: Before signing, users often cannot directly understand what asset changes, permission changes, contract calls, or potential risks the transaction will lead to. During Execution: Although the specific details of contract function calls are visible, the call paths are complex and the hierarchy levels are too numerous. Which specific consequences in a transaction these behaviors correspond to needs to be translated before they can be understood by ordinary people. Post-execution: After execution, states need to be updated and data needs to be recorded. Although state changes after execution are completed automatically by machines, these changes are not necessarily intuitively readable for humans. Therefore, they need to be interpreted into assets, permissions, risks, or business results.